high7.5
CVE-2025-62585
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
Impact
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Navercorp | Whale | before 4.33.325.17 |